This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer File: ArvU-GWhLXmgmgNEhs5hugI4gsc.cer (raw, json) Hash identifier: vQokoXxpwL1oTmNkfLpWnfDTVK70Mbzan3dv4k2o3qs= Subject key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AA68890BB6689EF9CB546E9B3C3B8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34929 AS: 51020 AS: 198589 IP: 5.62.128.0 -- 5.62.151.255 IP: 31.7.80.0/21 IP: 37.77.48.0/21 IP: 185.69.4.0/22 IP: 2a00:c9e0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a6:88:90:bb:66:89:ef:9c:b5:46:e9:b3:c3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02bbd4f865a12d79a09a034486ce61ba023882c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a2:b3:68:ed:5c:cc:87:8f:e9:72:5f:2f:a5: 6b:77:fc:89:02:fb:0b:6c:c6:35:dc:5b:42:ee:1b: 2f:f4:02:de:5e:3f:d3:4b:da:53:09:82:3e:01:58: 29:f0:08:7a:d0:2d:1b:21:35:92:89:b7:26:6e:e0: 26:14:15:00:89:b9:cc:f4:73:98:f3:a9:c6:03:36: ea:01:14:20:f2:f2:ff:57:fb:d2:48:b4:22:09:91: b3:b0:e0:11:62:b3:23:93:89:dc:15:93:df:d4:90: 24:f6:75:3d:8b:a7:bb:ad:27:c5:7b:77:5b:19:e2: 8d:34:43:b7:34:18:71:54:bb:36:d4:88:74:c1:db: 5c:ad:7f:7b:ae:ce:b1:27:bf:b8:d3:97:94:6a:88: b9:f1:f5:ff:e8:06:72:e4:09:d7:c1:da:8f:5f:c4: c8:08:62:1c:bb:af:ad:7d:e2:e3:18:43:30:88:80: e3:d9:5d:1e:6c:13:a7:f8:be:5f:31:3c:97:b3:cf: 14:dc:18:89:2d:c0:bb:70:db:85:75:d7:87:1d:77: 87:65:07:51:ad:aa:d5:d8:b4:19:9a:97:9d:ad:88: c3:33:e4:16:a0:9d:8b:56:ca:7b:0e:87:27:f4:a0: 0b:e8:09:40:dd:2a:1b:cc:b9:95:6c:ae:fd:ea:e2: ff:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.62.128.0-5.62.151.255 31.7.80.0/21 37.77.48.0/21 185.69.4.0/22 IPv6: 2a00:c9e0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34929 51020 198589 Signature Algorithm: sha256WithRSAEncryption 02:53:41:1b:dc:54:df:bb:c2:e1:9f:39:72:43:1b:6a:9d:5d: 26:24:db:73:b1:d6:ef:c8:dc:0c:31:51:92:40:ba:41:fc:28: 24:f5:c2:7b:bb:0f:a0:e5:66:68:a0:59:6e:36:d1:fc:77:d4: c1:db:04:2b:9e:cc:74:eb:24:dd:21:fe:6a:87:c2:b5:29:15: 29:55:2f:5f:97:0b:da:73:63:8b:b9:c2:94:51:e1:5e:bd:c1: d4:a5:fc:a2:ab:4d:fe:ab:cd:d1:f8:2f:47:ae:69:dd:ef:4c: 51:65:53:c6:89:1c:9b:81:72:e6:f0:17:33:0b:6d:0c:9a:73: 23:94:04:58:72:17:51:92:50:af:e7:53:48:b1:c0:c1:f3:af: 7a:ac:17:50:62:8e:2c:3d:4b:c0:36:7e:18:bb:34:f9:31:82: 5e:63:39:1e:21:48:23:17:2f:ea:6b:a5:b1:51:7a:d1:73:8c: 2b:2d:7a:04:4e:6c:7a:ba:fd:04:ba:33:b2:8f:95:16:40:0b: 3a:b0:61:d8:dd:40:81:aa:2b:a3:5c:dd:f6:26:5d:47:df:41: e9:ee:89:6b:4a:6b:63:ac:e5:7a:28:f0:02:29:a4:0c:93:14: 92:06:97:1a:4e:1d:a3:54:32:2d:c5:11:6a:9c:ec:3c:88:d3: 6b:ca:5c:74 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt6WqaIkLtmie+ctUbps8O4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmJiZDRmODY1YTEyZDc5YTA5YTAzNDQ4NmNlNjFiYTAyMzg4MmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KKzaO1czIeP6XJfL6Vrd/yJAvsL bMY13FtC7hsv9ALeXj/TS9pTCYI+AVgp8Ah60C0bITWSibcmbuAmFBUAibnM9HOY 86nGAzbqARQg8vL/V/vSSLQiCZGzsOARYrMjk4ncFZPf1JAk9nU9i6e7rSfFe3db GeKNNEO3NBhxVLs21Ih0wdtcrX97rs6xJ7+405eUaoi58fX/6AZy5AnXwdqPX8TI CGIcu6+tfeLjGEMwiIDj2V0ebBOn+L5fMTyXs88U3BiJLcC7cNuFddeHHXeHZQdR rarV2LQZmpedrYjDM+QWoJ2LVsp7Docn9KAL6AlA3SobzLmVbK796uL/UQIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFAK71PhloS15oJoDRIbOYboCOILHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlL2NiODNi Mi0zM2I1LTQ1NjAtODkzNS0wYTk4MDQ4Y2RmNzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvY2I4M2Iy LTMzYjUtNDU2MC04OTM1LTBhOTgwNDhjZGY3Mi8xL0FydlUtR1doTFhtZ21nTkVo czVodWdJNGdzYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgMAwDBAcFPoADBAMFPpADBAMfB1ADBAMlTTADBAK5 RQQwDQQCAAIwBwMFAyoAyeAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAIhxAgMA x0wCAwMHvTANBgkqhkiG9w0BAQsFAAOCAQEAAlNBG9xU37vC4Z85ckMbap1dJiTb c7HW78jcDDFRkkC6QfwoJPXCe7sPoOVmaKBZbjbR/HfUwdsEK57MdOsk3SH+aofC tSkVKVUvX5cL2nNji7nClFHhXr3B1KX8oqtN/qvN0fgvR65p3e9MUWVTxokcm4Fy 5vAXMwttDJpzI5QEWHIXUZJQr+dTSLHAwfOveqwXUGKOLD1LwDZ+GLs0+TGCXmM5 HiFIIxcv6mulsVF60XOMKy16BE5serr9BLozso+VFkALOrBh2N1Agaoro1zd9iZd R99B6e6Ja0prY6zleijwAimkDJMUkgaXGk4do1QyLcURapzsPIjTa8pcdA== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:29 2026 by rpki-client